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A PALEY-LIKE GRAPH IN CHARACTERISTIC TWO 


ANDREW THOMASON 


Abstract. The Paley graph is a well-known self-complementary pseudo¬ 
random graph, defined over a finite field of odd order. We describe an 
attempt at an analogous construction using fields of even order. Some 
properties of the graph are noted, such as the existence of a Hamiltonian 
decomposition. 


1. Introduction 

The well-known Paley graph is a pseudo-random graph whose vertex set 
is the finite field Fq = GF{q) of order q = 1 (mod 4). The pair of vertices 
a, b is joined by an edge if a — 6 is a square in Fg. Since —1 is a square the 
graph is well defined. It follows from elementary properties of the quadratic 
character that the Paley graph is vertex-transitive, self-complementary, and 
each edge is in (q — 5)/4 triangles. A graph of order q in which every edge 
is in {q — 5)/4 triangles and whose complement has the same property is 
sometimes called a conference graph. The Paley graph is thus ipso facto a 
pseudo-random graph, as explained in detail in |T2], and in a somewhat less 
quantitative fashion in Chung, Graham and Wilson in [3]. 

The other odd prime powers, namely those where q = 3 (mod 4), cannot 
be used to construct Paley graphs since —1 is not a square. However this 
very property allows the construction of a tournament, or oriented complete 
graph, on the vertex Fq by inserting an edge oriented from a to 6 if a — 6 is a 
square. Since —1 is not a square, exactly one of a — 6 and 6 — a is a square, 
so we do indeed construct a tournament (Graham and Spencer [6|). 

The property of pseudo-randomness, even when quantified, does not suf¬ 
fice to give all the information that one would like to have about the Paley 
graphs; in particular, it is not known what the clique number is. When 
q is prime the calculation reduces to difficult and so far unsolved problems 
involving the estimation of character sums (though if g is a square the clique 
size is exactly ^/q). For more information, see [131 Section 2.5.1]. 

As regards Hamiltonian cycles, the Paley graphs hold fewer secrets. If q 
is a prime then the Paley graph is a circulant graph and, since the edges of 
a given distance in a circulant of prime order form a Hamiltonian cycle, it 
follows that the Paley graph in this case is not just Hamiltonian but it has a 
Hamiltonian decomposition, that is, its edge set is the union of edge-disjoint 
Hamiltonian cycles. 

In a hnite held of characteristic two, every element is a square, and the 
dehnition of the Paley graph is of little value. From the graph theoretical 
point of view, though, characteristic two has some innate attraction. In 
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this note we describe an attempt to find different graphs, similar in spirit 
to the Paley graphs but defined in relation to the field Fq for even q, which 
are vertex-transitive and self-complementary. We might even hope to find 
a graph which is a conference graph, or which is more easily analysed than 
the Paley graph. Whilst these more ambitious aims are not realised, we do 
describe the more accessible properties of the graphs. 

2. Definition 

We begin with a definition of the graphs, and defer to ^ a discussion of 
what lies behind it. Choose as vertex set V the elements of PG{l,q), the 
projective space of dimension one over Fq . We label the elements of V in 
the natural way, namely 

Given an element x G Fq its trace is defined to be tr(x) = x + + 

... + x ^/"^ . Let q = 2^ and let a be an element of Fq with tr(a) = 1. For 
even k we define a graph Gk{a) on the vertex set V by 

xy G E{Gk{a)) if = 0. 

For odd k we define a tournament Gk{a), having an edge directed from x to 
y whenever the same equation is satisfied. 

We shall show in 114.11 that Gk{a) is well defined. Moreover, although 
Gk{a) as a labelled graph depends on the value of a (for example, the neigh¬ 
bourhood of the vertex 0 is the set of elements y such that tr(a/y) = 0), we 
shall show in ^that all the graphs (or tournaments) so defined are isomor¬ 
phic. This allows us to refer to any member of this collection of graphs as 
the graph G^ when there is no danger of confusion. 

At first appearance the definition of the graph G^ looks somewhat con¬ 
trived. We attempt in ^to show that the definition does in fact arise fairly 
naturally. Having made a few elementary remarks about the properties of Fq 
(in @ we establish in ^that Gk{a) is a vertex-transitive self-complementary 
graph whose isomorphism class is independent of a, as claimed. Finally, we 
explore some of the further properties of the graph G^', in particular we show 
that it is a pseudo-random graph, having a Hamiltonian decomposition. 

3. Background 

The Paley graph is a circulant graph when q is prime; that is, its vertices 
may be labelled {0,1,..., g — 1}, and whether xy is an edge depends only 
on the difference \x — y\. It is therefore necessarily vertex-transitive, and it 
is also self-complementary. A regular self-complementary graph has order 
= 1 (mod 4), and obviously there is no such graph with vertex set Fq when 
q is even. We set out to define a circulant graph on vertex set PG{1, q). 

The group PSL{2,q), comprising the 2x2 matrices of determinant one, 
acts on V = PG{l,q). As usual, we associate with the matrix (“^) the 
Mobius, or linear fractional, map z i-A {az + b)j{cz + d). We use two simple 
facts about these maps; that they form a group, and (for this background 
discussion) that a map is determined by its action on any three points. For 
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convenience and completeness we assume only a minimal familiarity with 
properties of finite fields. Much more can be found in the classical algebraic 
text of Dickson [5] or the more recent and geometrical Hirschfeld [?]• Both 
these authors pay attention to the characteristic two case needed here. 

In order to begin constructing a circulant on V we need a Mobius trans¬ 
formation of order q + 1. It is not hard to show, though we don’t need this 
fact, that every transformation with no fixed points is conjugate to one of 
the form z i—>■ a/(z-hi) such that the equation -hx = a has no solution in 
Fg. Let us then consider such a map. The condition that x^ -h x = a has no 
solution is equivalent to the condition tr(a) = 1 (see ^4.111 . Amongst such 
transformations there exist some of order q-hl (see ^4.21) . 

Take such a transformation a. Then V = {oo, a(oo), a^(oo),..., q:'^(oo)}. 
For convenience, we write Vi = a*(oo), so D = {uo,ui,... ,Vg}. Notice that, 
for example, vi = a{oo) = 0 and V 2 = a(0) = a. Moreover a~^(z) = l + a/ 2 , 
so Vg = a'^(oo) = a“^(oo) = 1 and Vg-i = q;“^( 1) = I + a. It is easily 
verified, by induction on i, that Vg-i = 1 -h Vi (the induction step being 
Vg-i-i = a~^{vq-i) = 1 + a/vg-i = 1 + a/(I + u*) = I -I- a{vi) = 1 + Uj+i). 
Subscripts may be reduced modulo (g + 1), so we write V-i = 1 + Uj. 

We may, therefore, define a circulant graph on V as follows. Choose a 
map f : Fg ^ F 2 , to he specified later. The neighbours of 00 = uq will be 
those Vi for which f{vi) = 0. In general, ViVj will be an edge if v^Vj-i is an 
edge, which is to say, if f{vj-i) = 0. In order that the graph be well defined 
we must ensure that f{vi-j) = f{vj-i), which we have seen is equivalent to 
f{x + 1) = /(x). (This section is just to motivate the earlier definition, so 
we ignore tournaments here.) 

Let us see how to compute whether xy is an edge, given x,y & V. Let 
X = Vi and y = Vj. Then xy will be an edge if f{vi-j) = f{vj-i) = 0. Now 
Vi-j = a~^(x). We claim that the map a~^ is identical to the Mobius map 
/3{z) = {zy -h z -h a)/{z + y), and so Vi-j = /3(x) = {xy -h x -h a)/{x -h y). 
To check the claim, it suffices to show that and /3 act identically on 
the three distinct points Uj_i, Vj and Uj+i. Now a~^ maps these points to 
V-i = I, uo = 00 and vi = 0. But Vj = y, Vj-i = a~^{y) = 1 + a/y and 
Vj+i = a{y) = a/{y + l). Thus I3{vj-i) = f3{l + a/y) = 1, /3{vj) = f3{y) = 00 
and /3(uj+i) = I3{a/{y + 1)) = 0, proving the claim. We conclude that xy is 
an edge if f{{xy + x + a)/{x + y)) = f{vj-i) = 0 . 

The map Vi i-A V 2 i is a permutation of V which leaves vq fixed. An easy 
way to ensure that our circulant graph is self-complementary is to arrange 
that this map interchanges the graph with its complement. So we wish to 
arrange that if x = Vi then f{v 2 i) 7 ^ /(x), or, equivalently, f{v 2 i) + f{x) = 1 . 
If we put j = —i then V 2 i = and using the calculation in the previous 
paragraph with y = v-i = 1 -|- x, we see that V 2 j = {xy -h x -h a)/{x -h y) = 
x^ -|- a. 

Therefore this procedure will yield a self-complementary vertex-transitive 
graph if we select a function f ■ Fg ^ F 2 such that /(x) = f{x -|- 1 ) and 
/(x) -|- /(x^ -|- a) = 1 for all x G Fg. An obvious choice is / = tr. In fact, 
this is the only natural choice which does not depend on a itself; for we may 
assume that /(O) = 0, and then we must have f{a) = 1 for all a to which 
the discussion applies, namely those a for which tr(a) = 1 and a has order 
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q+1. This is close to requiring /(a) = 1 whenever tr(a) = 1, which in turn 
implies / = tr because / must be zero on exactly half the elements of Fq. 
So by the process described we arrive at the definition of the graph Gk{a). 

3.1. Other possibilities. Aiming for a circulant is not a priori the right 
thing to do; the Paley graphs are circulants if q is prime but not in general. 
However, in order that the group PSL(2, q) have a nice action on our graph 
we should choose its edge set to be a union of orbits of elements of PSL{2, q). 
We also want the graph to be self-complementary and to have some Mobius 
map interchanging the graph and its complement. As we shall see below, a 
great number of Mobius maps have order q + 1, and so any graph of this 
more general kind is likely to be circulant. 


4. Field Work 


Here we make further, standard and elementary, calculations over finite 
fields to justify some earlier remarks. A full treatment of these matters can 
be found in Lidl and Niederreiter [9]. 


4.1. Trace comments. The trace map is defined by tr(a) = o + + 

... -|- Thus tr(a)^ = tr(a) so tr(a) G F 2 . Moreover trace is a linear 

map. There is a distinction between even k and odd k, because 


tr(l) = 1 + 1“^ + 1"^ + ... + 1 ^“^ 


0 if A: is even 
1 if A: is odd. 


Since trace is a linear map, 


tr 


xy + X + a 
x + y 


+ tr 


yx + y + a\ 


It follows that the definition in ^ determines a graph if k is even and a 
tournament if k is odd, as claimed. 

The map tr : Fg —>• F 2 is surjective, since trace, being a polynomial of 
degree lower than q, cannot annihilate Fq. Let Ti = tr“^(i), i = 0,1. Then 
To is the kernel of trace; since the map is surjective, we have dimTo = A: — 1 
and so |To| = |Ti| = 2^~^ = q/2. 

Now tr(a^) = tr(a), or tr(a^ + a) = 0. The map x ^ x"^ + x \s also a linear 
map Fq — )• Fq. Its kernel is F 2 so its image has dimension A; — 1. But its 
image contains Tq. Therefore its image is Tq; in particular, for every element 
c with tr(c) = 0 there exists an element b ^ Fq with b'^ + b = c. There are 
two solutions to this quadratic equation, the other being 6 -|- 1. Thus if k 
is even and tr(l) = 0 the two solutions have the same trace, whereas if k is 
odd the solutions have different traces. 


4.2. Mobius comments. Our aim here is to identify a suitable element 
a G Tq with which to carry out the above construction. Note that, for any a 
with tr(o) = 1, then the equation z^+z-\-a = 0 has no solution in Tq, because 
iT{z^ -\- z + a) = tr(a) = 1. Therefore the equation has a root A in Tq 2 . It 

follows that A = A'^ is the other root, because A + A + a = (A^ + A + a)*?. 

Let k be the order of the element A/A in Tq 2 . Then 1 = (A/A)^ = 
but also = 1, so A; I (g + 1) (in particular, if q -|- 1 is a Fermat prime 

then A/A has order q + 1). 
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Now let A: > 2 be any factor of g + 1 . Let g he a primitive root for Fq 2 . 
Then the cyclic group of order q + 1 has exactly (pik) elements of order 

k, where (p is Euler’s function. Let g. = ^30 element of order k in 

Then Therefore g ^ Fq, for otherwise 

g'^~^ = 1 which would imply (g + 1 ) | 2t, which in turn would imply that 
g^ = 1, contradicting k > 2. 

Given g = as described, let v = g^. Let b = v + V, where u = 

Then 6 = 6 '? = 17 + p = 6 , so 6 E Eg. Put A = p/6. Thus A + A = 1, and 
the element A/A = p/p = g has order k. Let AA = a; since = a we have 
o E Fq. Moreover A^ + A + o = 0, so tr(o) = A + A”? = 1. 

We summarize as follows. Every element a of trace 1 in Fq satisfies an 
equation A^ + A + o = 0 where A E Fq 2 and the order of A/A divides q + 1. 
Conversely, for every factor fc > 2 of g + 1 there exists such an a such that 
A/A has order k. 

In particular, there exists an a such that A/A has order q + 1. For such an 
a, consider the map a ■. z ^ a/{z + 1) and its associated matrix (5 f )• This 
matrix has eigenvectors (^) and (^) with eigenvalues A and A respectively. 
Now 00 = (g) = (i) + ( 3 )- Therefore the result of applying the map 

i-A 0/(2; + 1 ) to 00 A: times is A^( 3 ) + A^(^). This equals (g) only if 

A^ + A^ = 0, which is to say (A/A)^ = 1 . Since A/A has order g + 1 , the 
vertex 00 is in an a-orbit of size q + 1. Thus there do exist elements a for 
which the graph Gk{a) is a self-complementary circulant graph, as described 
in ^ 


5. Elementary properties 

Some of the more accessible properties of Gk can now be described. 

5.1. Isomorphisms. Let b G Fq . The map x 1 —>■ a: -|- 6 is a permutation of 
Fq . Moreover 

/ {x + b){y + b) + {x + b) + a\_ /xy + x + b'^ + b + a 

"V ix + b) + iy + b) ) - 

Suppose that k is odd, that is, tr(l) = 1 . Let a and a' be two elements 
of Ti. Then tr(a -|- a') = 0, and by the remarks in ^4.11 there exists an 
element 6 with 6 ^ -|- 6 -|- a = a' and tr( 6 ) = 0. Therefore (f) shows that 
the map x i-a x -|- 6 is an isomorphism Gk{a') —)• Gk{a). Moreover, since 
1 ^ -|- 1 -|- a = a, by (f) the map x i-A x -|-1 is an orientation-reversing bijection 
of the vertex set, because tr(l) = 1. It follows that the tournaments defined 
in ^ are isomorphic to each other and are self-complementary. 

Now let k be even. We showed in ^Ithat there is some element a for which 
the map a -. z ^ a/{z + l) has order q + 1 and tr(a) = 1. Let a' be any other 
element of Ti. Let c = a' — a. Again, by the remarks in ^4.11 there exists an 
element 6 with 6 ^-|- 6 -|-a = a'. Now either tr( 6 ) = 0, in which case (f) shows 
that the map x i-A x -|- 6 is an isomorphism Gk{a') —>■ Gk{a), or tr( 6 ) = 1 , in 
which case the map x i-A x -|-6 is an isomorphism between Gk{a') and the com¬ 
plement of Gk{a). But G}.{o) is vertex-transitive and self-complementary. 


^+tr(6). (t) 
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as shown in ^ Therefore the graphs defined in ^ are isomorphic to each 
other, being both vertex-transitive and self-complementary. 


5.2. Automorphisms. Let a & Fg have trace one. The Mobius map z i-A 
a/{z -|- 1) is a permutation of V. It is also an automorphism of the graph 
Gk{a), because 


a 

x-\-l 


_ I _ 9l _ L Q 

y-\-l ^ x+l ^ ^ 


a I a 
x-\-l ' y+1 


xy + X + a 
x + y 


This, of course, is just the automorphism a that was built into the definition 
of Gk{a). 

In the graph case, the map z z + 1 is also an automorphism, being the 


map Vi i-A V-i. 


5.3. Co-degrees. The co-degree of a pair x, y of vertices is the number 
of their common neighbours. As mentioned earlier, a (;/2-regular graph of 
order g -|- 1 is a conference graph if every pair x,y has codegree g/4 — e, 
where e = 0 or 1 according as x and y are not adjacent or are adjacent. 

The present graphs do not quite satisfy this condition but come close. Let 
us compute the co-degree of a:,y in Ga{q)- By the rotational symmetry we 
may assume that y = oo. A vertex w ^ {oo,a;} is joined to oo if tr(r(;) = 0 
and to X if tr((a:u; + x + a)/{x + w)) = 0. Let tp : Fg ^ {—1,1} be the 
additive character 'tp{z) = (—If i is the co-degree of x,y, then there 
are g/2 — e — f vertices joined to x but not to y, with the same number joined 
to y but not x. So we have 

E , , , , /xw + X + a\ ,, , 

--- = g - 1 - 4 g/2 -e-i). 

r. , \ X + W J 

Thus, writing K for the sum on the left, we have i = q/A — e + {K + l)/4. 
Using the substitutions w = z + x and 6 = -|- x -|- a we have 

K = ^ 'ip{z -b x)'0 [x+-j = ^ Ip (z + - 

Therefore A is a Kloosterman sum] see Lidl and Niederreiter 0 Section 5.5] 
for a discussion. In particular, |A| < 2y^ (O Theorem 5.45]). This 
was proved by Carlitz and Uchiyama [1], extending the proof by Weil m 
to even g. A self-contained proof, based on Stepanov m , appears in 
Schmidt [TDl Chapter 2]. 

In the case that G^ is a graph we have g = 2^ where k is even, and so 
is an even integer. Therefore every co-degree is at most g/4 -|- y/qf2. 

5.4. Pseudo-randomness. For our purposes, the import of the preceeding 
estimate of co-degrees is that the graph Gk is pseudo-random. Specifically, 
it is {1/2, jumbled, meaning that, for every induced subgraph H C 
Gk-, \e-{H) — < q^/^\H\ holds. This follows comfortably from [HI 

Theorem 1.1] using the bound g/4 -|- ■y/q/2 for co-degrees. 

From this it follows that Gk enjoys all the usual consequences of pseudo¬ 
randomness, such as expansion, having about the expected number of in¬ 
duced subgraphs of any given kind, and so on. 
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Another approach to showing that is pseudo-random would be to es¬ 
timate the eigenvalues, which are of course available in a reasonably explicit 
form given that Gk is a circulant. However the present approach via co¬ 
degrees is quick and effective. 

5.5. Hamiltonian decompositions. As mentioned above, the Paley graph 
of order q has a Hamiltonian decomposition when q is prime because it is 
a circulant of prime order, and likewise so is Gk if g -|- 1 is a Fermat prime, 
though there seems to be a limited supply of these. 

What about non-prime orders? For the Paley graph, there is always a 
Hamiltonian decomposition, as shown by Alspach, Bryant and Dyer [1]. 
The graphs Gk too have a Hamiltonian decomposition, at least if k is large. 
This follows from the deep work of Kiihn and Osthus [3. Theorem 1.2 of [8] 
states that there is some number r > 0 such that, provided Gk is a robust 
{t/3, t)- expander, then Gk has a Hamiltonian decomposition for large k. 
This condition requires that, for every subset S of the vertices of Gk with 
Tq < |S| < (1 — T)q, there are at least |5| -|- Tq/3 vertices of Gk having at 
least Tq/3 neighbours in S. The condition is comfortably satisfied by Gk 
because it is (1/2, g^/^)-jumbled (using simple standard properties of such 
graphs m)- The decomposition is, of course, not explicit but there is a 
polynomial time algorithm for finding it. 

6. Acknowledgements 

Thanks are due to Robin Chapman for his comments. In particular he 
suggests another description of the graph Gk, from a field theoretic, rather 
than a geometric, viewpoint. The line PG{l,q) can be identified in a nat¬ 
ural way with the quotient group F* 2 /F*, so we can consider graphs with 
this as its vertex set. Let A E F* 2 . Given u,v G F *2 then the equiv¬ 
alence classes [n],[u] are vertices of a graph Hx, and we join [u] to [u] 
if ii{T{Xu^v)/T{\)T{u‘^v)) = 0, where T{x) = x -|- is the trace map 
F *2 F*. Chapman [2] shows that Hx is well defined and isomorphic to 
Gk. 
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